Mozilla
Page 12 of 38 — Mozilla CVEs from a corpus of 3730, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-22742 | Medium | 6.5 | 2022-12-22 | When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable crash. This vulnerabil… |
CVE-2022-22741 | High | 7.5 | 2022-12-22 | When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode. This vulnerability affects Firefox ESR <… |
CVE-2022-22740 | High | 8.8 | 2022-12-22 | Certain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free causing a potentially ex… |
CVE-2022-22739 | Medium | 6.5 | 2022-12-22 | Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol. This vulnerability affects Firefox ESR < 91… |
CVE-2022-22738 | High | 8.8 | 2022-12-22 | Applying a CSS filter effect could have accessed out of bounds memory. This could have lead to a heap-buffer-overflow causing a potentially exploitable crash… |
CVE-2022-22737 | High | 7.5 | 2022-12-22 | Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to a use-after-free causing a p… |
CVE-2022-22736 | High | 7.0 | 2022-12-22 | If Firefox was installed to a world-writable directory, a local privilege escalation could occur when Firefox searched the current directory for system librari… |
CVE-2022-1887 | Critical | 9.8 | 2022-12-22 | The search term could have been specified externally to trigger SQL injection. This vulnerability affects Firefox for iOS < 101. |
CVE-2022-1834 | Medium | 6.5 | 2022-12-22 | When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird would have displaye… |
CVE-2022-1802 | High | 8.8 | 2022-12-22 | If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-control… |
CVE-2022-1529 | High | 8.8 | 2022-12-22 | An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype polluti… |
CVE-2022-1520 | Medium | 4.3 | 2022-12-22 | When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encr… |
CVE-2022-1197 | Medium | 5.4 | 2022-12-22 | When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet r… |
CVE-2022-1196 | Medium | 6.5 | 2022-12-22 | After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash. This vulnera… |
CVE-2022-1097 | Medium | 6.5 | 2022-12-22 | <code>NSSToken</code> objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use-after-fre… |
CVE-2022-0843 | High | 8.8 | 2022-12-22 | Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety bugs present in Firefox 97. Some of these bugs showed evidence of… |
CVE-2022-0566 | High | 8.8 | 2022-12-22 | It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write of one byte when processing the message… |
CVE-2022-0517 | High | 7.8 | 2022-12-22 | Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch arbitr… |
CVE-2022-0511 | High | 8.8 | 2022-12-22 | Mozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan Herrera, Lars T Hansen, and the Mozilla Fuzzing Team reported m… |
CVE-2021-4221 | Medium | 4.3 | 2022-12-22 | If a domain name contained a RTL character, it would cause the domain to be rendered to the right of the path. This could lead to user confusion and spoofing a… |
CVE-2021-4140 | Critical | 10.0 | 2022-12-22 | It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR < 91.5, Firefox < 96… |
CVE-2021-4129 | Critical | 9.8 | 2022-12-22 | Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported memory safe… |
CVE-2021-4128 | Medium | 6.5 | 2022-12-22 | When transitioning in and out of fullscreen mode, a graphics object was not correctly protected; resulting in memory corruption and a potentially exploitable c… |
CVE-2021-4127 | Critical | 9.8 | 2022-12-22 | An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird < 78.9 and… |
CVE-2021-4126 | Medium | 6.5 | 2022-12-22 | When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list… |
CVE-2020-15685 | High | 8.8 | 2022-12-22 | During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulner… |
CVE-2020-15679 | High | 7.6 | 2022-12-22 | An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL, convince a VPN user to login via that… |
CVE-2022-4066 | Low | 3.5 | 2022-11-19 | A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onion_response_flush of the file src/o… |
CVE-2022-3479 | High | 7.5 | 2022-10-14 | A vulnerability found in nss. By this security vulnerability, nss client auth crash without a user certificate in the database and this can lead us to a segmen… |
CVE-2022-21190 | High | 7.5 | 2022-05-13 | This affects the package convict before 6.2.3. This is a bypass of [CVE-2022-22143](https://security.snyk.io/vuln/SNYK-JS-CONVICT-2340604). The [fix](https://g… |
CVE-2022-29167 | High | 7.4 | 2022-05-05 | Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the request and re… |
CVE-2021-4138 | Medium | 5.3 | 2022-05-02 | Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname. |
CVE-2022-22143 | High | 7.5 | 2022-05-01 | The package convict before 6.2.2 are vulnerable to Prototype Pollution via the convict function due to missing validation of parentKey. **Note:** This vulnerab… |
CVE-2021-43546 | Medium | 4.3 | 2021-12-08 | It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird < 91.4.0, Firefo… |
CVE-2021-43545 | Medium | 6.5 | 2021-12-08 | Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0… |
CVE-2021-43544 | Medium | 6.1 | 2021-12-08 | When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to loa… |
CVE-2021-43543 | Medium | 6.1 | 2021-12-08 | Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additional content. This vulnerability affects… |
CVE-2021-43542 | Medium | 6.5 | 2021-12-08 | Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols. This vulnerability aff… |
CVE-2021-43541 | Medium | 6.5 | 2021-12-08 | When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. This vulnerability affects Thunder… |
CVE-2021-43540 | Medium | 6.5 | 2021-12-08 | WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been uninstalled with th… |
CVE-2021-43539 | High | 8.8 | 2021-12-08 | Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers… |
CVE-2021-43538 | Medium | 4.3 | 2021-12-08 | By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock… |
CVE-2021-43537 | High | 8.8 | 2021-12-08 | An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulne… |
CVE-2021-43536 | Medium | 6.5 | 2021-12-08 | Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird <… |
CVE-2021-43535 | High | 8.8 | 2021-12-08 | A use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory corruption and a potentially exploitable… |
CVE-2021-43534 | High | 8.8 | 2021-12-08 | Mozilla developers and community members reported memory safety bugs present in Firefox 93 and Firefox ESR 91.2. Some of these bugs showed evidence of memory c… |
CVE-2021-43533 | Medium | 4.3 | 2021-12-08 | When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to u… |
CVE-2021-43532 | Medium | 6.1 | 2021-12-08 | The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that triggered authentication flows - in conjun… |
CVE-2021-43531 | Medium | 4.3 | 2021-12-08 | When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the… |
CVE-2021-43530 | Medium | 6.1 | 2021-12-08 | A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. *This bug o… |
CVE-2021-43528 | Medium | 6.5 | 2021-12-08 | Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level… |
CVE-2021-43527 | Critical | 9.8 | 2021-12-08 | NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. App… |
CVE-2021-38510 | High | 8.8 | 2021-12-08 | The executable file warning was not presented when downloading .inetloc files, which, due to a flaw in Mac OS, can run commands on a user's computer.*Note: Thi… |
CVE-2021-38509 | Medium | 4.3 | 2021-12-08 | Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary (although unstyled) contents could be displayed over top a… |
CVE-2021-38508 | Medium | 4.3 | 2021-12-08 | By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validity message could hav… |
CVE-2021-38507 | Medium | 6.5 | 2021-12-08 | The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently upgraded to TLS while retaining the visual properties of an HT… |
CVE-2021-38506 | Medium | 4.3 | 2021-12-08 | Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user. This could lead to spoofing attacks on… |
CVE-2021-38505 | Medium | 6.5 | 2021-12-08 | Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to the clipboard to the cloud, and make it… |
CVE-2021-38504 | High | 8.8 | 2021-12-08 | When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have resulted, leading to memory corruption a… |
CVE-2021-38503 | Critical | 10.0 | 2021-12-08 | The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the… |
CVE-2021-38502 | Medium | 5.9 | 2021-11-03 | Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgrade attack to intercept transmitted mes… |
CVE-2021-38501 | High | 8.8 | 2021-11-03 | Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evidence of memory corruption and we presu… |
CVE-2021-38500 | High | 8.8 | 2021-11-03 | Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evidence of memory corruption and we presu… |
CVE-2021-38499 | High | 8.8 | 2021-11-03 | Mozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2021-38498 | High | 7.5 | 2021-11-03 | During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitabl… |
CVE-2021-38497 | Medium | 6.5 | 2021-11-03 | Through use of reportValidity() and window.open(), a plain-text validation message could have been overlaid on another origin, leading to possible user confusi… |
CVE-2021-38496 | High | 8.8 | 2021-11-03 | During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploitable cras… |
CVE-2021-38495 | High | 8.8 | 2021-11-03 | Mozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs showed evidence of memory corruption and we presume that with… |
CVE-2021-38494 | High | 8.8 | 2021-11-03 | Mozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2021-38493 | High | 8.8 | 2021-11-03 | Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed evidence of memory corruption and we pres… |
CVE-2021-38492 | Medium | 6.5 | 2021-11-03 | When delegating navigations to the operating system, Firefox would accept the `mk` scheme which might allow attackers to launch pages and execute scripts in In… |
CVE-2021-38491 | Medium | 6.5 | 2021-11-03 | Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded. This vulnerability affects Firefox < 92. |
CVE-2021-29993 | High | 8.1 | 2021-11-03 | Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI spoofs. *This bug only affects Firefox fo… |
CVE-2021-29991 | High | 8.1 | 2021-11-03 | Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers. This allowed for a header splitting attack against servers… |
CVE-2021-40529 | Medium | 5.9 | 2021-09-06 | The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between tw… |
CVE-2021-29990 | High | 8.8 | 2021-08-17 | Mozilla developers and community members reported memory safety bugs present in Firefox 90. Some of these bugs showed evidence of memory corruption and we pres… |
CVE-2021-29989 | High | 8.8 | 2021-08-17 | Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some of these bugs showed evidence of memory corruption and we pres… |
CVE-2021-29988 | High | 8.8 | 2021-08-17 | Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentially exploita… |
CVE-2021-29987 | Medium | 6.5 | 2021-08-17 | After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be displayed in a different position but still… |
CVE-2021-29986 | High | 8.1 | 2021-08-17 | A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash. *Note: This issue only affected Linux operati… |
CVE-2021-29985 | High | 8.8 | 2021-08-17 | A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbir… |
CVE-2021-29984 | High | 8.8 | 2021-08-17 | Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection. This led to me… |
CVE-2021-29983 | Medium | 6.5 | 2021-08-17 | Firefox for Android could get stuck in fullscreen mode and not exit it even after normal interactions that should cause it to exit. *Note: This issue only affe… |
CVE-2021-29982 | Medium | 6.5 | 2021-08-17 | Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the potential leak of a single bit of memory. Th… |
CVE-2021-29981 | High | 8.8 | 2021-08-17 | An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failures in JITted code that would lead to a po… |
CVE-2021-29980 | High | 8.8 | 2021-08-17 | Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable crash. This vulnerabil… |
CVE-2021-29978 | Critical | 9.8 | 2021-08-05 | Multiple low security issues were discovered and fixed in a security audit of Mozilla VPN 2.x branch as part of a 3rd party security audit. This vulnerability… |
CVE-2021-29977 | High | 8.8 | 2021-08-05 | Mozilla developers reported memory safety bugs present in Firefox 89. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2021-29976 | High | 8.8 | 2021-08-05 | Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. Some of these bugs showed evidence of memory corruption… |
CVE-2021-29975 | Medium | 6.5 | 2021-08-05 | Through a series of DOM manipulations, a message, over which the attacker had control of the text but not HTML or formatting, could be overlaid on top of anoth… |
CVE-2021-29974 | Medium | 4.3 | 2021-08-05 | When network partitioning was enabled, e.g. as a result of Enhanced Tracking Protection settings, a TLS error page would allow the user to override an error on… |
CVE-2021-29973 | High | 8.8 | 2021-08-05 | Password autofill was enabled without user interaction on insecure websites on Firefox for Android. This was corrected to require user interaction with the pag… |
CVE-2021-29972 | High | 8.8 | 2021-08-05 | A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library. Updating the library resolved the issue, and may have remedia… |
CVE-2021-29971 | Critical | 9.8 | 2021-08-05 | If a user had granted a permission to a webpage and saved that grant, any webpage running on the same host - irrespective of scheme or port - would be granted… |
CVE-2021-29970 | High | 8.8 | 2021-08-05 | A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. *This bug could only be triggered when acces… |
CVE-2021-29969 | Medium | 5.9 | 2021-08-05 | If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses prior to the completion of the STARTTLS ha… |
CVE-2021-29979 | Medium | 6.1 | 2021-08-02 | Hubs Cloud allows users to download shared content, specifically HTML and JS, which could allow javascript execution in the Hub Cloud instance’s primary hostin… |
CVE-2020-15660 | High | 8.8 | 2021-07-20 | Missing checks on Content-Type headers in geckodriver before 0.27.0 could lead to a CSRF vulnerability, that might, when paired with a specifically prepared re… |
CVE-2021-29968 | High | 8.1 | 2021-06-24 | When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur. *This bug only affects Firefox on Windows. Other operating systems… |
CVE-2021-29967 | High | 8.8 | 2021-06-24 | Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we pres… |